Critical · published July 16, 2021
🚨 Default admin credentials are still in play, letting attackers cruise through your door access system like they own the place! 🔥 Think of it as leaving a set of spare keys to your office under the welcome mat — super convenient for you, but it also means anyone passing by can let themselves in! With this vulnerability, a remote attacker can waltz right into the system, gaining the highest permissions possible. This means they could access sensitive attendance data, manipulate access control settings, and potentially lock out legitimate users. The consequences could be absolutely devastating for your organization!
Think of it as leaving a set of spare keys to your office under the welcome mat — super convenient for you, but it also means anyone passing by can let themselves in! CVE-2021-35961 exploits hard-coded default admin credentials in the Dr. ID Door Access Control and Personnel Attendance Management system, allowing unauthorized remote access without any additional authentication.
With this vulnerability, a remote attacker can waltz right into the system, gaining the highest permissions possible. This means they could access sensitive attendance data, manipulate access control settings, and potentially lock out legitimate users. The consequences could be absolutely devastating for your organization! Immediately change the default admin password to a strong, unique one and ensure that all systems are updated to the latest version. Regularly audit user access and permissions to prevent any unauthorized access in the future. You've got this! Follow these steps to secure your system and keep the digital intruders at bay! 🛡️